Ethereal-dev: Re: [ethereal-dev] "Save" and display filter field

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Gilbert Ramirez <gram@xxxxxxxxxx>
Date: Wed, 16 Jun 1999 11:05:43 -0500
On Tue, Jun 15, 1999 at 08:05:11PM -0500, Guy Harris wrote:
> 
> 
> It should also mean that we can use the BPF interpreter in "libpcap"
> (until Gilbert finishes his stuff) rather than the current limited
> filtering code in "wiretap", which would, I think, mean there'd no
> longer be any reason to use "libpcap" to read capture files - it'd be
> used only for live captures (and to supply the userland BPF
> interpreter).  Given that, we could probably nuke the "--with-wiretap"
> configuration option, and *always* use "wiretap" to read capture files.

Exactly what I am planning. libpcap for capturing, including capture
filters, wiretap for reading all files (therefore the "--with-wiretap"
configure option goes away), and ethereal for display filters.

And then I'll worry about either making wiretap have all the capture
facitilies we need, or patching libpcap to do so.

--gilbert